CVE-2019-20772

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software

published April 17, 2020

CVSS
—
EPSS
0%
Percentile
38.5
In the wild
Unconfirmed
What it is

⚠️ An authorization bypass lurking in LG mobile devices could leave your account unprotected! 📱 Think of it as a hotel room where the front desk gives out keys without checking IDs — anyone could walk in and claim to be you! If this vulnerability is exploited, an attacker could potentially access sensitive account information without proper authorization. This could lead to unauthorized transactions or data breaches that could compromise your personal details.

Put simply

Think of it as a hotel room where the front desk gives out keys without checking IDs — anyone could walk in and claim to be you! The vulnerability arises from the Account subsystem in LG devices running specific versions of Android, allowing unauthorized access by bypassing normal authentication procedures.

What to do

If this vulnerability is exploited, an attacker could potentially access sensitive account information without proper authorization. This could lead to unauthorized transactions or data breaches that could compromise your personal details. To mitigate this, check for software updates from LG and install any patches available for your device. It's also wise to review your account settings for any suspicious activity and consider changing your passwords. You've got this! Stay vigilant, keep your device updated, and you’ll be a security hero in no time! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00455 · 38.5th percentile
Published
2020-04-17T13:35Z
EPSS history
Timeline
  • 17 APR 13:35Z
    An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software
    cvelistv5